SSLBL: Malicious SSL certificate detected (Vidar C&C)

SID: 903210465Rev: 1EnabledDerived4 views
Filesslblacklist_tls_cert.rules
CreatedAugust 21, 2026
UpdatedAugust 21, 2026
alert tls $EXTERNAL_NET any -> $HOME_NET any (msg:"SSLBL: Malicious SSL certificate detected (Vidar C&C)"; tls_cert_fingerprint; content:"aa:50:e1:b4:a6:e7:c6:6b:a2:ce:4c:1c:82:e6:2f:8d:74:cd:72:02"; reference:url, sslbl.abuse.ch/ssl-certificates/sha1/aa50e1b4a6e7c66ba2ce4c1c82e62f8d74cd7202/; sid:903210465; rev:1;)

References

urlsslbl.abuse.ch/ssl-certificates/sha1/aa50e1b4a6e7c66ba2ce4c1c82e62f8d74cd7202/

Comments (0)

Please sign in to leave a comment.
Sign in

No comments yet. Be the first to comment!